@nylorun/runtime 0.1.1-beta → 0.1.2-beta

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.2-beta
+
+### Patch Changes
+
+- d27242c: Show stopped guardrail and failed model requests as errors in Studio. Runtime now emits a terminal AG-UI error instead of marking failed requests successful, and Studio displays the reported message. The guardrails example also checks text content parts sent by Studio, including mixed media input, before invoking the model.
+- d27242c: Preserve opaque provider continuation metadata through assistant conversation history. Gemini tool calls now retain thought signatures when sending tool results back to the model, including signed empty text and reasoning blocks. Only the originating provider and model receive their signatures.
+
 ## 0.1.1-beta
 
 ### Patch Changes

package/README.md

@@ -35,10 +35,18 @@ The creator runs `nylorun configure` after installation and before development u
 
 ## Portable contracts
 
-`RuntimeAgent` supplies `id`, `name`, a matching `manifest`, and `run({ id })`. Its session supplies `input`, `stream`, `observe`, and `stop`. An input handle's `completed` promise settles after that input's execution or pause, with ordered lifecycle events and a status. Runtime uses completion events for terminal output and interactions, and observation events for optional diagnostics. Engines need not emit model/tool diagnostics or middleware metadata. Runtime records input before execution and flushes persistence before returning an HTTP reply. `stop()` releases session resources; optional agent `close()` runs after session shutdown. Shutdown is idempotent.
+`RuntimeAgent` supplies `id`, `name`, a matching `manifest`, and `run({ id })`. Its session supplies `input`, `stream`, `observe`, and `stop`. An input handle's `completed` promise settles after that input's execution or pause, with ordered lifecycle events and a status. Runtime uses completion events for terminal output, interactions, and failures, and observation events for optional diagnostics. Error or tripwire completions and rejected, cancelled, or stopped statuses produce a terminal AG-UI error; repeated diagnostic and completion reports do not duplicate the failure. Engines need not emit model/tool diagnostics or middleware metadata. Runtime records input before execution and flushes persistence before returning an HTTP reply. `stop()` releases session resources; optional agent `close()` runs after session shutdown. Shutdown is idempotent.
 
 `RuntimeModelAdapter` accepts ordered prompt items, tools, model controls, opaque media references, and an abort signal, returning portable text/reasoning/tool-call outputs. It has no engine import. Integration tests in the creator check assignment in both directions with Harness without casts. Runtime's own tests use an independent engine.
 
 Discovery and manifest documents use protocol version 2. The agent's manifest is under `manifest`; no engine-branded envelope is required. Existing agent-scoped HTTP endpoint paths remain unchanged. Studio also understands legacy version-1 `harness.manifest` documents.
 
 Repository development: [contributing](../CONTRIBUTING.md). Package publication: [releasing](../RELEASING.md).
+
+Provider continuation state (for example Gemini thought signatures) travels as
+opaque JSON `providerMetadata` on assistant text, reasoning, and tool-call
+blocks. Engines integrating `piModel()` must preserve it on the corresponding
+assistant prompt parts, including empty signed blocks and their order. Runtime
+only reuses signatures with the originating provider and model. Middleware that
+rewrites a signed block must remove its metadata; signatures describe the
+original provider output. Unsigned reasoning remains diagnostic output.

package/dist/contracts.d.ts

@@ -40,6 +40,10 @@ export interface RuntimeEvent {
     readonly event?: RuntimeInputEvent;
     readonly interaction?: unknown;
     readonly attributes?: unknown;
+    readonly tripwire?: {
+        readonly code: string;
+        readonly message?: string;
+    };
 }
 export interface RuntimeCompletion {
     readonly status: "completed" | "waiting" | "rejected" | "cancelled" | "stopped";
@@ -70,8 +74,15 @@ export interface RuntimeAgent {
     }): RuntimeSession;
     close?(): Promise<void>;
 }
-export type PromptContentPart = UserContentPart | {
+export type PromptContentPart = Exclude<UserContentPart, {
+    readonly type: "text";
+}> | {
+    readonly type: "text" | "reasoning";
+    readonly text: string;
+    readonly providerMetadata?: JsonObject;
+} | {
     readonly type: "tool-call";
+    readonly providerMetadata?: JsonObject;
     readonly id: string;
     readonly name: string;
     readonly args: JsonObject;
@@ -117,11 +128,13 @@ export interface RuntimeModelCandidate {
     readonly output: readonly ({
         readonly type: "text" | "reasoning";
         readonly text: string;
+        readonly providerMetadata?: JsonObject;
     } | {
         readonly type: "json";
         readonly value: JsonValue;
     } | {
         readonly type: "tool-call";
+        readonly providerMetadata?: JsonObject;
         readonly id: string;
         readonly name: string;
         readonly args: JsonObject;

package/dist/model/pi-model.js

@@ -21,6 +21,31 @@ export function piModel(options = {}) {
         const selected = registry.getModel(selection.provider, selection.model);
         if (!selected)
             throw new Error("Unknown model. Run nylorun configure.");
+        const signatureFor = (part) => {
+            const metadata = "providerMetadata" in part ? part.providerMetadata?.pi : undefined;
+            if (!metadata || typeof metadata !== "object" || Array.isArray(metadata))
+                return;
+            if (!("provider" in metadata) ||
+                metadata.provider !== selected.provider ||
+                !("model" in metadata) ||
+                metadata.model !== selected.id ||
+                !("signature" in metadata) ||
+                typeof metadata.signature !== "string")
+                return;
+            return metadata.signature;
+        };
+        const metadataFor = (signature, redacted) => signature === undefined
+            ? {}
+            : {
+                providerMetadata: {
+                    pi: {
+                        provider: selected.provider,
+                        model: selected.id,
+                        signature,
+                        ...(redacted ? { redacted: true } : {}),
+                    },
+                },
+            };
         const messages = [];
         const instructions = [];
         const content = async (parts) => {
@@ -85,11 +110,37 @@ export function piModel(options = {}) {
                                 id: part.id,
                                 name: part.name,
                                 arguments: { ...part.args },
+                                ...(signatureFor(part) === undefined
+                                    ? {}
+                                    : { thoughtSignature: signatureFor(part) }),
                             },
                         ]
                         : part.type === "text"
-                            ? [{ type: "text", text: part.text }]
-                            : []),
+                            ? [
+                                {
+                                    type: "text",
+                                    text: part.text,
+                                    ...(signatureFor(part) === undefined
+                                        ? {}
+                                        : { textSignature: signatureFor(part) }),
+                                },
+                            ]
+                            : part.type === "reasoning" &&
+                                signatureFor(part) !== undefined
+                                ? [
+                                    {
+                                        type: "thinking",
+                                        thinking: part.text,
+                                        thinkingSignature: signatureFor(part),
+                                        ...(typeof part.providerMetadata?.pi === "object" &&
+                                            part.providerMetadata.pi !== null &&
+                                            "redacted" in part.providerMetadata.pi &&
+                                            part.providerMetadata.pi.redacted === true
+                                            ? { redacted: true }
+                                            : {}),
+                                    },
+                                ]
+                                : []),
                 });
             }
             else
@@ -132,15 +183,24 @@ export function piModel(options = {}) {
             const output = [];
             for (const part of response.content) {
                 if (part.type === "text")
-                    output.push({ type: "text", text: part.text });
+                    output.push({
+                        type: "text",
+                        text: part.text,
+                        ...metadataFor(part.textSignature),
+                    });
                 else if (part.type === "thinking")
-                    output.push({ type: "reasoning", text: part.thinking });
+                    output.push({
+                        type: "reasoning",
+                        text: part.thinking,
+                        ...metadataFor(part.thinkingSignature, part.redacted),
+                    });
                 else if (part.type === "toolCall")
                     output.push({
                         type: "tool-call",
                         id: part.id,
                         name: part.name,
                         args: part.arguments,
+                        ...metadataFor(part.thoughtSignature),
                     });
             }
             return {

package/dist/server/ag-ui.js

@@ -40,13 +40,22 @@ export function agUiEvents(events, threadId, runId) {
                 : JSON.stringify(event.payload.output);
             output.push({ type: "TEXT_MESSAGE_START", messageId, role: "assistant" }, { type: "TEXT_MESSAGE_CONTENT", messageId, delta: text }, { type: "TEXT_MESSAGE_END", messageId });
         }
-        else if (event.type === "error") {
+        else if (event.type === "error" || event.type === "tripwire") {
+            const tripwire = event.payload.tripwire;
+            const payload = tripwire && typeof tripwire === "object"
+                ? { ...event.payload, ...tripwire }
+                : event.payload;
+            const attributes = payload.attributes;
+            const message = payload.message ??
+                (attributes && typeof attributes === "object" && "message" in attributes
+                    ? attributes.message
+                    : undefined);
             output.push({
                 type: "RUN_ERROR",
-                message: typeof event.payload.message === "string"
-                    ? event.payload.message
-                    : "Agent run failed.",
+                message: typeof message === "string" ? message : "Agent run failed.",
+                ...(typeof payload.code === "string" ? { code: payload.code } : {}),
             });
+            return Object.freeze(output);
         }
     }
     output.push({ type: "RUN_FINISHED", threadId, runId });

package/dist/server/host.js

@@ -176,7 +176,9 @@ export async function createRuntime(options) {
             ? payload.threadId
             : randomUUID();
         if (!isSessionId(threadId))
-            return context.json({ error: "threadId may only contain letters, digits, '.', '_' and '-'" }, 400);
+            return context.json({
+                error: "threadId may only contain letters, digits, '.', '_' and '-'",
+            }, 400);
         const runId = typeof payload?.runId === "string" && payload.runId
             ? payload.runId
             : randomUUID();
@@ -266,6 +268,7 @@ export async function createRuntime(options) {
             ...("approved" in inputEvent ? { approved: inputEvent.approved } : {}),
             ...("value" in inputEvent ? { value: inputEvent.value } : {}),
         });
+        const start = entry.events.length;
         try {
             const result = await entry.session.input(input).completed;
             for (const event of result.events) {
@@ -281,12 +284,26 @@ export async function createRuntime(options) {
                     add(entry, agentId, event.type, { interaction: event.interaction });
                 }
             }
-            entry.status =
-                result.status === "waiting"
+            const observedFailure = entry.events
+                .slice(start)
+                .some((event) => event.type === "error" || event.type === "tripwire");
+            const completionFailure = result.events.find((event) => event.type === "error" || event.type === "tripwire");
+            const failed = observedFailure ||
+                completionFailure !== undefined ||
+                (result.status !== "completed" && result.status !== "waiting");
+            if (!observedFailure && completionFailure) {
+                add(entry, agentId, completionFailure.type, observedPayload(completionFailure));
+            }
+            else if (!observedFailure && failed) {
+                add(entry, agentId, "error", {
+                    message: `Agent run ${result.status}.`,
+                });
+            }
+            entry.status = failed
+                ? "failed"
+                : result.status === "waiting"
                     ? "waiting"
-                    : result.status === "completed"
-                        ? "completed"
-                        : "failed";
+                    : "completed";
             await entry.writes;
         }
         catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nylorun/runtime",
-  "version": "0.1.1-beta",
+  "version": "0.1.2-beta",
   "description": "Portable agent hosting, model providers, and the Nylorun CLI.",
   "type": "module",
   "license": "Apache-2.0",